Change a couple comments to MOZ_ASSERT from the removed JS_ASSERT.  No bug, r=trivial
Bug 999651 - Test for typed array data-inlining code invalidation on ArrayBuffer neutering, where the typed array's data pointer remains unchanged.  r=sfink
Bug 995679 - Test for length-inlining code invalidation on ArrayBuffer neutering.  r=sfink
Bug 1009952 - Tests for {g,s}etElemTryTypedStatic failing to watch out for neutering.  r=sfink
Bug 1011007 - MTypedArrayLength hoisting test.  r=jandem
Bug 991981 - Test for %TypedArray%.prototype.copyWithin.  r=sfink
Bug 991981 - Test for DataView.prototype.set* with neutering during arguments parsing.  r=sfink
Bug 991981 - new DataView() index handling test.  r=sfink
Bug 991981 - Test for ArrayBuffer.prototype.slice.  r=sfink
Bug 991981 - %TypedArray%.prototype.subarray test.  r=sfink
Bug 991981 - Test for asm.js ArrayBuffer heap neutering during arguments coercion.  r=luke
Bug 991981 - Test for typedArray.set(arraylike, offset) not asserting when arraylike.length neuters typedArray.  r=sfink
Bug 991981 - Test for TypedObject aggregate setting on a neutered buffer.  r=nmatsakis
Bug 991981 - Test for TypedObjectGet not being neutering-aware.  r=nmatsakis